General

  • Target

    2024-04-08_b61312246c0a44de0592aea396085a56_cryptolocker

  • Size

    37KB

  • MD5

    b61312246c0a44de0592aea396085a56

  • SHA1

    284dc48d319a217a44868ead212723723d547460

  • SHA256

    e310fb8d57ae46a973244e2d0b4d500fd6aff81d9e4fde39f8b41c02e4aeb79d

  • SHA512

    9b49f5178bcbb9185ff2488b4aea129fdbbfd511e1c7ed5757b392d1913961ff0d5f1e3c4087c8e3dfcbd69549651c91cb161cb3f1486b272fe5f3ccea5769f8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITm:qDdFJy3QMOtEvwDpjjWMl7Tm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_b61312246c0a44de0592aea396085a56_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections